Last updated: July 24, 2026
This guide explains how to create a Kiosk profile in Mobile Device Manager Plus to lock supervised iOS 6+ devices into one or a few approved apps. Admins create the profile under Device Management > Profiles > iOS profile > Kiosk Mode, choosing Single App or Multiple Apps mode and selecting the approved app(s). Devices must be restarted if apps are installed after the profile is applied, and additional restrictions can be layered on for multiple-app mode.
Kiosk is an advanced security feature that enables IT Admin to allow/restrict users to one or a few preselected applications. This helps in device management by locking down the iPhones or iPads into Kiosk Mode to display a single app or the chosen apps and prevents the user from accessing any other feature of the device. This feature can be applied only to Supervised devices running iOS 6 or later versions. Kiosk is applied to devices immediately if the specified apps are already installed in the device. If the apps are installed after the Kiosk profile has been applied, the mobile device must be restarted for the Kiosk to function. To know more about Kiosk mode in iOS, refer this.
To create a Kiosk profile, follow the steps given below:
When a device is locked in the multiple app mode, the device settings icon will be available on the screen as Apple does not allow MDM to remove the setting icon from the screen. Apply the following restrictions by navigating to Device Mgmt -> Profiles -> iOS Profiles -> Restrictions.
Kiosk mode can only be applied to supervised iOS devices running iOS 6 or later.
Only if the approved app is installed after the Kiosk profile has already been applied - in that case the device must be restarted for Kiosk mode to function. If the app is already installed, Kiosk mode applies immediately.
Apple does not allow MDM to remove the Settings icon in multiple-app mode, but you can layer on restrictions under Device Mgmt -> Profiles -> iOS Profiles -> Restrictions, such as preventing account changes, Wi-Fi changes not pushed from MDM, device name changes, self-installed or deleted apps, or factory resets.